Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663235623a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663235623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          2mWzXupBObNEtZCxDxIOcnHTAZ+hwJvEWHadEA4PLek=
Subject key identifier:   3B:7E:BE:C6:20:54:28:16:B8:39:D5:95:DB:29:FF:30:CD:57:53:D7
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       14FB8BE39545AE7AA11890BEC2627DA5C4DDB8BE
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663235623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 03:28:22 +0000
ROA not before:           Tue 01 Jul 2025 03:23:22 +0000
ROA not after:            Tue 30 Jun 2026 03:28:22 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f25b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fb:8b:e3:95:45:ae:7a:a1:18:90:be:c2:62:7d:a5:c4:dd:b8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 03:23:22 2025 GMT
            Not After : Jun 30 03:28:22 2026 GMT
        Subject: CN=3B7EBEC620542816B839D595DB29FF30CD5753D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:b5:93:d2:d5:ab:3d:b7:0c:10:c7:72:c5:
                    ad:26:85:7e:c1:b3:95:82:c9:47:47:eb:db:f8:60:
                    23:55:0a:cf:a3:47:aa:32:4a:e7:57:21:6a:46:96:
                    49:aa:49:73:7b:05:b9:d7:a0:36:d6:e2:2b:5a:8b:
                    6d:98:42:7a:03:ae:23:56:7c:1e:a2:ad:f2:d7:8a:
                    90:25:9c:06:8d:71:43:4e:99:e7:81:ee:6c:8e:fb:
                    e7:98:9c:ed:80:2e:e9:d8:1e:ff:fb:6c:26:6d:3c:
                    51:35:6b:df:e1:80:8a:3e:63:d6:bd:43:03:b4:20:
                    e5:5c:c7:5b:49:5d:cd:05:3e:55:c6:6d:60:0d:8f:
                    35:3a:f4:0c:c5:d3:60:ae:49:9c:71:e5:c5:2a:57:
                    67:5b:f1:b5:57:b9:6b:05:09:d5:aa:2e:dd:6a:e6:
                    fe:5a:d5:da:99:db:60:59:76:51:88:b3:44:26:49:
                    a7:0d:3e:6b:0c:2f:88:f8:b2:b0:ec:82:3e:80:7d:
                    5c:be:aa:d7:5a:b9:8a:29:4f:0d:1b:ec:9a:1b:97:
                    5c:d1:91:b7:04:18:49:3f:b4:2b:b1:b2:48:c5:70:
                    19:8d:4f:42:ac:b0:39:1a:49:5a:dd:0c:03:7d:f8:
                    8f:63:d0:ca:54:5f:6a:f6:eb:90:b8:86:e2:c2:e3:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7E:BE:C6:20:54:28:16:B8:39:D5:95:DB:29:FF:30:CD:57:53:D7
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663235623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f25b::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:a2:98:b9:15:83:97:99:4e:c8:21:0a:e9:28:1a:b5:be:9a:
         9f:f4:d5:36:4c:f4:94:55:c1:e2:b6:47:05:28:10:e1:7e:ba:
         61:0a:13:e2:20:07:fb:fa:c3:7d:07:90:4d:29:49:2b:96:ff:
         dc:50:fb:f1:55:fa:89:3a:fb:ec:6b:55:f5:2b:78:ec:1f:f3:
         f8:6c:d3:ce:75:32:5c:f1:68:39:3c:37:1c:45:06:c4:0e:61:
         50:62:f4:44:e7:e3:71:ff:05:72:f2:bf:e3:f0:d0:93:79:09:
         d9:93:e7:d8:b5:40:46:c1:ff:82:b3:93:23:66:8e:01:df:c0:
         02:80:73:9c:33:15:35:f5:37:12:6d:f6:9a:5d:d7:d2:19:75:
         5f:a5:43:0f:6b:5a:df:7c:e9:e7:30:9c:90:85:ea:a3:30:5e:
         61:6a:81:e0:cf:8d:89:de:19:80:69:6e:d3:b3:f4:16:93:cd:
         91:b2:d3:24:0c:1a:b6:60:a8:dc:1b:c3:35:90:cd:57:77:5a:
         22:07:e3:e9:52:b5:3a:9f:22:71:b6:5e:1d:c8:93:b2:a1:28:
         98:e9:92:33:55:a5:48:dd:47:85:87:0a:23:8c:59:a8:00:68:
         de:9c:96:bf:88:34:eb:a5:5b:a2:ef:f8:16:46:fb:35:8d:84:
         2a:34:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:26:41 2025 by rpki-client